The problem is the opposite. For example, Firefox’ screenshot addon would inject... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

kuschku on Feb 6, 2018 | parent | context | favorite | on: Grammarly shared its tokens with all websites

The problem is the opposite.

For example, Firefox’ screenshot addon would inject HTML into the page, and then the page could take the screenshot’s data and use it.

Addons currently have no way to reliably display their own UI on top of the page, without the page intercepting it.

MaxBarraclough on Feb 6, 2018 [–]

Oh, right, I didn't get that from your original comment.

I agree, addons' workings shouldn't be exposed to untrusted websites.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact